CVE-2023-0809

Description

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Affected Platforms

Weakness Type

CWE-789, CWE-770

References

• https://mosquitto.org/blog/2023/08/version-2-0-16-released/
• https://security.gentoo.org/glsa/202401-09
• https://mosquitto.org/blog/2023/08/version-2-0-16-released/
• https://security.gentoo.org/glsa/202401-09